Trusted Execution Environments: Properties, Applications, and Challenges
Patrick Jauernig, Ahmad‐Reza Sadeghi, Emmanuel Stapf · IEEE Security & Privacy · 2020
Software attacks on modern computer systems have been a persisting challenge for several decades, leading to a continuous arms race between attacks and defenses. As a first line of defense, operating system kernels enforce process isolation to limit potential attacks to only the code containing the vulnerabilities. However, vulnerabilities in the kernel itself (for example, various vulnerabilities found by Google Project Zero), side-channel attacks,1or even physical attacks2can be used to undermine process isolation.